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Amendments to the Claims: 



This listing of claims will replace all prior 
versions and listings of claims in the application: 



Listing of Claims : 



Claims 1-14 (canceled) . 



1 Claim 15 (new) : A method for distributing software 

2 components, the method comprising the steps of: 

3 deriving a first software component identifier from a 

4 software component ; 

5 creating integrity test data by performing, on the 

6 software component, an integrity test relating to at least 

7 one of the quality and the functionality of the software 

8 component; 

9 creating, by an integrity certificate originator and 

10 using the first software component identifier, an integrity 

11 certificate having the integrity test data; 

12 retrieving the software component through a client 

13 computer; 

14 deriving, by the client computer, a second software 

15 component identifier from the software component; 

16 retrieving the integrity certificate by the client 

17 computer and using the second software component identifier; 

18 and 

19 disclosing the integrity test data to a user by the 

20 client computer. 

1 Claim 16 (new) : The method recited in claim 15 further 

2 comprising the step of registering, in a certificate 



Page 3 of 17 



Appl. No. 10/534,951 

Amdt. dated Dec. 12, 2008 

Reply to Office action of June 20, 2008 



3 register, the integrity certificate of the software 

4 component using the first software component identifier. 

1 Claim 17 (new) : The method recited in claim 16 wherein the 

2 integrity certificate retrieving step comprises the step of 

3 accessing of the certificate register. 

1 Claim 18 (new) : The method recited in claim 15 further 

2 comprising the step of verifying an identity of the 

3 integrity certificate originator. 



1 Claim 19 (new) : The method recited in claim 18 further 

2 comprising the step of adding a digital signature to the 

3 integrity certificate. 

1 Claim 20 (new) : The method recited in claim 19 further 

2 comprising the step of verifying the digital signature. 

1 Claim 21 (new) : The method recited in claim 15 further 

2 comprising the step of matching the integrity test data to a 

3 user's preferred requirements. 

1 Claim 22 (new) : The method recited in claim 15 further 

2 comprising the step of retrieving the integrity certificate 

3 from the client computer. 



1 Claim 23 (new) : The method recited in claim 15 further 

2 comprising the step" of retrieving the integrity certificate 

3 from a computer associated with a supplier of the software 

4 component. 
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1 Claim 24 (new) : The method recited in claim 15 further 

2 comprising the step of retrieving the integrity certificate 

3 from a computer associated with a trusted certificate 

4 originator. 

1 Claim 25 (new) : The method recited in claim 15 further 

2 comprising the step of mailing the integrity certificate, 

3 through email, to the client computer. 

1 Claim 2 6 (new) : The method recited in claim 15 further 

2 comprising the step of determining the integrity test data 

3 using common criteria (CC) . 

1 Claim 27 (new) : The method recited in claim 15 wherein the 

2 integrity test data comprises a rating of the quality of the 

3 software component with respect to at least one of 

4 robustness, reliability, soundness and completeness. 

1 Claim 28 (new) : A server arranged for: 

2 deriving a software component identifier from a 

3 software component; 

4 creating integrity test data by performing an integrity 

5 test relating to at least one of the quality and 

6 functionality of the software component; 

7 creating, by a certificate originator, an integrity 

8 certificate having the integrity test data; 

9 labeling, by the integrity certificate originator, the 

10 integrity certificate with the software component 

11 identifier; 

12 allowing retrieval of the software component by a 

13 client computer; and 
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14 allowing retrieval of the integrity certificate by the 

15 client computer using the software component identifier. 

1 Claim 29 (new): A client computer arranged for: 

2 retrieving a software component from a server; 

3 deriving a software component identifier from the 

4 software component; 

5 retrieving, using the software component identifier, an 

6 integrity certificate having integrity test data, the test 

7 data relating to at least one of the quality and 

8 functionality of the software component; and 

9 disclosing the integrity test data to a user. 

1 Claim 30 (new) : A computer readable medium having computer 

2 executable instructions stored therein for instruction by a 

3 client computer which, when executed, cause the client 

4 computer to perform the steps of: 

5 retrieving a software component from a server; 

6 deriving a software component identifier from the 

7 software component; 

8 retrieving, using the software component identifier, an 

9 integrity certificate having integrity test data, the test 

10 data relating to at least one of the quality and 

11 functionality of the software component; and 

12 disclosing the integrity test data to a user. 
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